middleware

Mar 7, 2016 GO-2022-0369 +22 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Changes in this version

+ func RequireRepoWriter() macaron.Handler

type RepoContext

+ func (r *RepoContext) IsWriter() bool

Feb 24, 2016 GO-2022-0369 +22 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Jan 30, 2016 GO-2022-0369 +22 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Dec 18, 2015 GO-2022-0369 +22 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Dec 13, 2015 GO-2022-0369 +22 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Changes in this version

type RepoContext

+ IsViewBranch bool

+ IsViewCommit bool

+ IsViewTag bool

Dec 6, 2015 GO-2022-0369 +22 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Changes in this version

+ func RequireRepoPusher() macaron.Handler

type RepoContext

+ func (r *RepoContext) IsPusher() bool

Nov 25, 2015 GO-2022-0369 +22 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Changes in this version

+ func HandleOrgAssignment(ctx *Context, args ...bool)

Nov 21, 2015 GO-2022-0369 +22 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Nov 12, 2015 GO-2022-0369 +22 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Nov 8, 2015 GO-2022-0369 +22 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Changes in this version

type Context

+ func (ctx *Context) APIError(status int, title string, obj interface{})

Sep 26, 2015 GO-2022-0369 +22 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Sep 5, 2015 GO-2022-0369 +22 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Changes in this version

+ func RetrieveBaseRepo(ctx *Context, repo *models.Repository)

type RepoContext

+ CommitID string

Aug 16, 2015 GO-2022-0369 +22 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-1060: Gogs vulnerable to Cross-site Scripting in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Changes in this version

+ const CHROME_COPY_SUPPORT

+ const FIREFOX_COPY_SUPPORT

+ func AutoSignIn(ctx *Context) (bool, error)

+ func RequireRepoAdmin() macaron.Handler

type RepoContext

+ func (r RepoContext) IsAdmin() bool

Aug 2, 2015 GO-2022-0369 +21 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Changes in this version

type Context

+ func (ctx *Context) HandleText(status int, title string)

+ func (ctx *Context) HasValue(name string) bool

Mar 26, 2015 GO-2022-0369 +21 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Mar 19, 2015 GO-2022-0369 +21 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Changes in this version

+ func RequireAdmin() macaron.Handler

type Context

+ func (ctx *Context) HandleAPI(status int, obj interface{})

+ type RepoContext struct

+ AccessMode models.AccessMode

+ BranchName string

+ CloneLink models.CloneLink

+ Commit *git.Commit

+ CommitId string

+ CommitsCount int

+ GitRepo *git.Repository

+ IsBranch bool

+ IsCommit bool

+ IsTag bool

+ IsWatching bool

+ Mirror *models.Mirror

+ Owner *models.User

+ RepoLink string

+ Repository *models.Repository

+ Tag *git.Tag

+ TagName string

+ TreeName string

+ func (r RepoContext) HasAccess() bool

+ func (r RepoContext) IsOwner() bool

Feb 13, 2015 GO-2022-0369 +21 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Jan 5, 2015 GO-2022-0369 +21 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Dec 14, 2014 GO-2022-0369 +21 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Nov 19, 2014 GO-2022-0369 +21 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Changes in this version

+ func ApiRepoAssignment() macaron.Handler

+ func ApiReqBasicAuth() macaron.Handler

+ func ApiReqToken() macaron.Handler

+ func RepoRef() macaron.Handler

type Context

+ IsBasicAuth bool

Oct 10, 2014 GO-2022-0369 +23 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0642: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-0831: SQL Injection in Gogs in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Changes in this version

+ func GitHookService() macaron.Handler

Sep 18, 2014 GO-2022-0369 +23 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0642: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-0831: SQL Injection in Gogs in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Sep 14, 2014 GO-2022-0369 +23 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0642: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-0831: SQL Injection in Gogs in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Changes in this version

+ func Contexter() macaron.Handler

+ func OrgAssignment(redirect bool, args ...bool) macaron.Handler

+ func RequireTrueOwner() macaron.Handler

type Context

+ Org struct{ ... }

Jun 6, 2014 GO-2022-0369 +23 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0642: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-0831: SQL Injection in Gogs in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Jun 1, 2014 GO-2022-0369 +23 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0642: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-0831: SQL Injection in Gogs in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

May 31, 2014 GO-2022-0369 +23 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0642: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-0831: SQL Injection in Gogs in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Changes in this version

+ func RequireOwner() martini.Handler

type Context

+ func (ctx *Context) GetErrMsg() string

+ func (ctx *Context) HasApiError() bool

Apr 29, 2014 GO-2022-0369 +23 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0642: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2022-0831: SQL Injection in Gogs in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Apr 21, 2014 GO-2022-0369 +21 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Changes in this version

+ var MaxMemory = int64(1024 * 1024 * 10)

+ func Bind(obj interface{}, ifacePtr ...interface{}) martini.Handler

+ func BindIgnErr(obj interface{}, ifacePtr ...interface{}) martini.Handler

+ func ErrorHandler(errs base.BindingErrors, resp http.ResponseWriter)

+ func Form(formStruct interface{}, ifacePtr ...interface{}) martini.Handler

+ func Json(jsonStruct interface{}, ifacePtr ...interface{}) martini.Handler

+ func MultipartForm(formStruct interface{}, ifacePtr ...interface{}) martini.Handler

+ func Validate(obj interface{}) martini.Handler

type Context

+ Flash *Flash

+ func (ctx *Context) ServeContent(name string, r io.ReadSeeker, params ...interface{})

+ func (ctx *Context) ServeFile(file string, names ...string)

+ type Flash struct

+ ErrorMsg string

+ SuccessMsg string

+ func (f *Flash) Error(msg string)

+ func (f *Flash) Success(msg string)

+ type Validator interface

+ Validate func(*base.BindingErrors, *http.Request, martini.Context)

Mar 31, 2014 GO-2022-0369 +21 more

  GO-2022-0369: Gogs vulnerable to improper PAM authorization handling in gogs.io/gogs

  GO-2022-0377: SSRF in repository migration in gogs.io/gogs

  GO-2022-0471: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0473: Cross site scripting via cookies in gogs in gogs.io/gogs

  GO-2022-0483: Cross-site Scripting vulnerability in repository issue list in Gogs in gogs.io/gogs

  GO-2022-0554: Unrestricted Upload of File with Dangerous Type in Gogs in gogs.io/gogs

  GO-2022-0556: OS Command Injection in file editor in Gogs in gogs.io/gogs

  GO-2022-0562: Path Traversal in Git HTTP endpoints in Gogs in gogs.io/gogs

  GO-2022-0566: SSRF in repository migration in gogs.io/gogs

  GO-2022-0570: Path Traversal in file editor on Windows in Gogs in gogs.io/gogs

  GO-2022-0583: Server-Side Request Forgery in gogs webhook in gogs.io/gogs

  GO-2022-0597: Cross-site Scripting in Gogs in gogs.io/gogs

  GO-2022-0749: OS Command Injection in gogs in gogs.io/gogs

  GO-2022-0788: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0797: Insecure Permissions in Gogs in gogs.io/gogs

  GO-2022-0822: Open Redirect in gogs.io/gogs

  GO-2023-1596: Gogs OS Command Injection vulnerability in gogs.io/gogs

  GO-2023-1971: Gogs and Gitea SSRF Vulnerability in code.gitea.io/gitea

  GO-2023-1972: Gogs XSS Vulnerability in gogs.io/gogs

  GO-2024-3275: Unpatched Remote Code Execution in Gogs in gogs.io/gogs

  GO-2024-3355: Remote Command Execution in file editing in gogs in gogs.io/gogs

  GO-2024-3356: Path Traversal in file update API in gogs in gogs.io/gogs

Changes in this version

+ const ContentHTML

+ const ContentJSON

+ const ContentLength

+ const ContentType

+ const ContentXHTML

+ func InitContext() martini.Handler

+ func Logger() martini.Handler

+ func Renderer(options ...RenderOptions) martini.Handler

+ func RepoAssignment(redirect bool, args ...bool) martini.Handler

+ func Toggle(options *ToggleOptions) martini.Handler

+ type Context struct

+ Cache cache.Cache

+ IsSigned bool

+ Repo struct{ ... }

+ Req *http.Request

+ Res http.ResponseWriter

+ Session session.SessionStore

+ User *models.User

+ func (ctx *Context) CsrfToken() string

+ func (ctx *Context) CsrfTokenValid() bool

+ func (ctx *Context) Debug(msg string, args ...interface{})

+ func (ctx *Context) GetCookie(name string) string

+ func (ctx *Context) GetSecureCookie(Secret, key string) (string, bool)

+ func (ctx *Context) HTML(status int, name string, htmlOpt ...HTMLOptions)

+ func (ctx *Context) Handle(status int, title string, err error)

+ func (ctx *Context) HasError() bool

+ func (ctx *Context) Query(name string) string

+ func (ctx *Context) RenderWithErr(msg, tpl string, form auth.Form)

+ func (ctx *Context) SetCookie(name string, value string, others ...interface{})

+ func (ctx *Context) SetSecureCookie(Secret, name, value string, others ...interface{})

+ type Delims struct

+ Left string

+ Right string

+ type HTMLOptions struct

+ Layout string

+ type Render struct

+ Data base.TmplData

+ func (r *Render) Error(status int, message ...string)

+ func (r *Render) HTML(status int, name string, binding interface{}, htmlOpt ...HTMLOptions)

+ func (r *Render) HTMLString(name string, binding interface{}, htmlOpt ...HTMLOptions) (string, error)

+ func (r *Render) JSON(status int, v interface{})

+ func (r *Render) JSONString(v interface{}) (string, error)

+ func (r *Render) Redirect(location string, status ...int)

+ func (r *Render) Template() *template.Template

+ type RenderOptions struct

+ Charset string

+ Delims Delims

+ Directory string

+ Extensions []string

+ Funcs []template.FuncMap

+ HTMLContentType string

+ IndentJSON bool

+ Layout string

+ type ToggleOptions struct

+ AdminRequire bool

+ DisableCsrf bool

+ SignInRequire bool

+ SignOutRequire bool